<head>
<link rel="match" href="password-with-csp-expected.html">
<meta http-equiv="content-security-policy" content="img-src 'none'">
</head>

<input type="password" id="passwd">

<script>
    // This verifies the eye icon (using data: URL) renders correctly under CSP.
    document.getElementById("passwd").focus();
    eventSender.keyDown('a');
</script>